Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 955
  • Last Modified:

Terminal Services Idle Timeout Problems

We have multiple Windows 2003 terminal servers. We have configured group policy to end active but idle sessions after 1 hour. What is happening though is that users are kicked off the terminal server after about 5-10 idle minutes. They get no pop-up warning that their session will end, it just logs them off. They have to log back on and restart any programs that were open. I have checked the individual terminal services configuration and the Sessions tab for each user. There are no settings that would impose a shorter idle timeout. We're also getting no messages in the event log that corresponds to this. Any ideas?
0
leatherleaf
Asked:
leatherleaf
  • 2
  • 2
1 Solution
 
Henrik JohanssonSystems engineerCommented:
Another GPO is propably overriding the configured setting with another value.
Use RSOP.msc to check where the effective policy setting is applied from.
Normally GPOs linked closer to object will take precedence of GPO linked to higher level in the structure when policy settings conflicts, but this can be overruled when configuring a GPO to be Enforced to deny any other GPO to override when settings conflicts. Right-click the GPO-link in GPMC to see if it has the Enforced flag set.
0
 
leatherleafAuthor Commented:
The GPO with the idle session timeout settings has the 'no override' checked.
0
 
Henrik JohanssonSystems engineerCommented:
It will give the effect that it will not let GPO linked closer to object than the the GPO override when policy settings are in conflict. Depending on version of OS/GPMC, it will be labeled 'no override' as its own flag or merged into enforced.
Run RSOP.msc to find the effective policy setting and what GPO is configuring this. If that GPO-link has 'no override' enabled, the option flag nead to be cleared to let the new GPO take effect when linked closer to computer object.
0
 
leatherleafAuthor Commented:
ended up calling Microsoft on this one. Had to enable the group policy to extend the limit of active sessions to 1 hour and now everything is working.
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now